NV3140 being used for a SIP Trunk
Issues are intermittent fast busy when calling out, and possibly some incoming calls failing. Secondary issue is the customer is trying to use a fax service across this, which we have recommended against, and faxes are all partial failures.
I added "ip ffe max-entries 500000" to the interfaces and it has greatly helped with cpu usage lowering from hitting 100% consistently to only rarely hitting as high as 92%.
The sip trunk is limited to 8 call paths and doing a sip debug it looks normal. I am not seeing SIP messages from any outside IP's or reasons for failed calls. This is leading me to believe the high cpu usage was causing issues and while ffe has helped it does not solve the problem with the config.
#show running-config
Building configuration...
! ADTRAN, Inc. OS version R13.5.1
! Boot ROM version R11.5.0
! Platform: NetVanta 3140, part number 1700341F1
! Serial number xxxxxxxxx
hostname xxxxxxx
enable password md5 encrypted xxxxxxx
clock timezone -5-Eastern-Time
ip subnet-zero
ip classless
ip routing
ipv6 unicast-routing
name-server xxxxxxx xxxxxxx
no auto-config
auto-config authname xxxxxx encrypted password xxxxxx
event-history on
no logging forwarding
no logging email
service password-encryption
username "admin" password encrypted "xxxxxx"
;
ip firewall
ip firewall stealth
no ip firewall alg msn
no ip firewall alg mszone
no ip firewall alg h323
no dot11ap access-point-control
qos map VoIP 0
match ip list SIP_port
set dscp 24
qos map VoIP 1
match ip list RTP_port
match dscp 46 ef
set dscp 46
interface gigabit-eth 0/1
description UPLINK
ip address xxx.xxx.218.135 255.255.255.192
ip ffe max-entries 500000
ip access-policy Private
no shutdown
media-gateway ip primary
interface gigabit-eth 0/2
no ip address
shutdown
interface gigabit-eth 0/3
description PBX
ip address 192.168.150.1 255.255.255.252
ip ffe max-entries 500000
ip access-group SIP_CPE_ACL in
qos-policy out VoIP
no shutdown
media-gateway ip primary
ip access-list standard SIP_NET_ACL
remark SIP Trunk to Voice Access Net
permit host xxx.xxx.172.244
permit host xxx.xxx.172.245
permit host 192.168.150.2
ip access-list standard VTY_SVC
remark ACL for VTY Service on Router
permit host xxx.xxx.247.133 log
permit host xxx.xxx.247.18 log
permit host xxx.xxx.247.4 log
ip access-list extended RTP_port
permit udp any range 1634 65535 any
ip access-list extended SIP_CPE_ACL
remark SIP Trunk to CPE
permit udp host 192.168.150.2 range 5060 5061 host 192.168.150.1
permit udp host 192.168.150.2 range 1634 32767 host 192.168.150.1
ip access-list extended SIP_port
permit udp any any eq 5060
ip policy-class Private
allow list self self
nat source list wizard-ics interface gigabit-ethernet 0/2 overload
nat source list wizard-ics interface gigabit-ethernet 0/3 overload
ip route 0.0.0.0 0.0.0.0 xxx.xxx.218.129
no tftp server
no tftp server overwrite
no http server
http secure-server
no snmp agent
no ip ftp server
no ip scp server
no ip sntp server
auto-link
auto-link server primary xxxxxx
auto-link server secondary xxxxxx
sip
sip udp 5060
no sip tcp
voice feature-mode network
voice forward-mode network
voice spre 1 *[12345689]X&
voice spre 2 *78&
voice spre 3 *77
voice spre 4 *75XX&
voice spre 5 *73
voice spre 6 *72&
voice spre 7 *70
voice spre 8 *67&
voice spre 9 *55
voice dial-plan 1 international 011-N$
voice dial-plan 2 local M11
voice dial-plan 3 local NXX-NXX-XXXX
voice dial-plan 4 local [01]911
voice dial-plan 5 local [01][235678]11
voice dial-plan 6 long-distance 1-NXX-NXX-XXXX
voice dial-plan 7 operator-assisted 00
voice dial-plan 8 operator-assisted 0[23456789]1[023456789]XXXXXXX
voice dial-plan 9 operator-assisted 0[23456789][023456789]XXXXXXXX
voice dial-plan 10 operator-assisted [01]411
voice dial-plan 11 specify-carrier 101XXXX$
voice codec-list Default_List
codec g711ulaw
codec g729
voice trunk-list CPE_TRK
trunk T30
voice trunk-list NET_TRK
trunk T10
voice trunk T10 type sip
description "Trunk to Voice Access Network SIP_245"
sip-server primary 10.195.1.4
outbound-proxy primary xxx.xxx.172.245
dial-string source to
hmr SIP_META out
register xxxxxx auth-name "xxxxxx" password encrypted "xxxxxx"
codec-list Default_List both
authentication username "xxxxxx" password encrypted "xxxxxx"
voice trunk T30 type sip
description "Trunk to CPE"
sip-server primary 192.168.150.2
grammar from host local
transfer-mode network
sip-server monitor
no shutdown
voice grouped-trunk NET
description "Route inside to outside"
trunk T10
accept $ cost 0
permit list CPE_TRK
!deny all other trunks
!deny all other ani
voice grouped-trunk CPE
description "Route outside to inside"
trunk T30
accept $ cost 0
permit list NET_TRK
!deny all other trunks
!deny all other ani
sip access-class ip "SIP_NET_ACL" in
sip qos dscp 24
ip rtp media-anchoring
hmr policy SIP_META
rule-set META_AUTH 10
hmr rule-set META_AUTH
message-rule CONTACT_HEADER message-type any 10
modify header contact position first match-value /sip:.*@/ new-value /sip:xxxxxx@/ 10
message-rule INVITE message-type request 20
set private-variable INVITE_PAI header sip-req-uri position first match-value "/^INVITE /" new-value true 10
message-rule ADD_PAI message-type request 30
match private-variable INVITE_PAI match-value true
add header p-asserted-identity position first new-value /<sip:xxxxxx@10.195.1.4>/ 10
line con 0
no login
line telnet 0 4
login local-userlist
shutdown
ip access-class VTY_SVC in
line ssh 0 4
login local-userlist
no shutdown
ip access-class VTY_SVC in
ntp server xxxxxx
ntp server xxxxxx
